| Package | Affected versions | Patched versions |
|---|---|---|
| acymailing | < 11.1.0 | 11.1.0 |
Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0 - A subscriber could store a path in a file-type custom field and have AcyMailing delete that file when the field was cleared, including files outside the upload folder such as configuration.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free